Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Saturday Drive — Vulnerabilities & Security Advisories 19

Browse all 19 CVE security advisories affecting Saturday Drive. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Saturday Drive is a fleet management solution designed for tracking and optimizing vehicle operations. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 14 recorded CVEs. The platform's web interface and API components have frequently contained input validation weaknesses, allowing unauthorized access and system compromise. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities across different versions indicates potential risks for organizations relying on this system for critical fleet operations.

Found 15 results / 19Clear Filters
CVE IDTitleCVSSSeverityPublished
CVE-2026-65052 Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fields — Ninja FormsCWE-472 7.5 High2026-07-21
CVE-2026-65051 Ninja Forms Server-Side Validation Bypass via Client-Controlled Field Metadata Merge in AJAX Submission Handler — Ninja FormsCWE-602 6.5 Medium2026-07-21
CVE-2026-65050 Ninja Forms Missing Authorization in submissions-table Gutenberg Block Discloses Form Submissions to Unauthenticated Visitors — Ninja FormsCWE-862 6.5 Medium2026-07-21
CVE-2026-65049 Ninja Forms Cross-Site Network-Wide Data Deletion on WordPress Multisite via nf_delete_all_data AJAX Action — Ninja FormsCWE-863 9.3 Critical2026-07-21
CVE-2026-65048 Ninja Forms Unauthenticated Stored Cross-Site Scripting via Repeatable Fieldset Submission Index — Ninja FormsCWE-79 9.3 Critical2026-07-21
CVE-2024-43999 WordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerability — Ninja FormsCWE-79 5.9 Medium2024-09-17
CVE-2024-39628 WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability — Ninja FormsCWE-352 5.4 Medium2024-08-26
CVE-2024-37934 WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability — Ninja FormsCWE-94 5.4 Medium2024-07-09
CVE-2023-38393 WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability — Ninja FormsCWE-862 7.6 High2024-06-19
CVE-2023-38386 WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability — Ninja FormsCWE-862 7.6 High2024-06-19
CVE-2024-25572 WordPress Plugin Ninja Forms Contact Form 安全漏洞 — Ninja Forms 8.8AIHighAI2024-04-11
CVE-2024-26019 WordPress Plugin Ninja Forms Contact Form 安全漏洞 — Ninja Forms 6.1AIMediumAI2024-04-11
CVE-2024-29220 WordPress plugin Ninja Forms 安全漏洞 — Ninja Forms 5.4AIMediumAI2024-04-11
CVE-2021-34647 Ninja Forms <= 3.5.7 Sensitive Information Disclosure — Ninja FormsCWE-863 6.5 Medium2021-09-22
CVE-2021-34648 Ninja Forms <= 3.5.7 Unprotected REST-API to Email Injection — Ninja FormsCWE-863 6.4 Medium2021-09-22

This page lists every published CVE security advisory associated with Saturday Drive. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.